Description
We are seeking a Principal Cybersecurity Engineer to join our Enterprise Security Engineering team. As a senior technical authority, you will serve as an architect of our broader security engineering strategy, focusing on endpoint privilege management, least-privilege enforcement, and agentic AI automation.
Responsibilities:
- Set technical vision and architectural standards for endpoint privilege management and least-privilege enforcement across macOS and Windows.
- Design scalable application control frameworks that maintain security baselines while preserving developer agility.
- Architect and manage application control and runtime guardrail frameworks to govern developer tools, IDE extensions, local AI coding assistants, and open-source package dependencies under least-privilege models.
- Establish enterprise authorization thresholds and runtime safeguards to enable safe AI adoption.
- Guide the architectural strategy and technical implementation of automated intake, research, and policy-staging pipelines for application evaluations, developer exception triage, and security review workflows.
- Drive telemetry correlation and integration architectures linking endpoint privilege controls with SaaS posture signals (SSPM), threat detection pipelines (EDR), and central automation servers.
- Provide architectural oversight and direction across EDR and SSPM platforms, advising engineering leads on detection models, configuration posture, and threat surface reduction.
- Bridge device telemetry and posture signals with enterprise asset correlation tools and cross-pillar orchestration layers.
- Serve as a dedicated technical mentor and coach to junior and mid-level engineers, helping them build technical depth, navigate operational challenges, and advance their careers.
- Lead technical design reviews, champion engineering best practices, and establish high standards for maintainability, documentation, and operational rigor.
- Partner with security engineering leadership to assess technical skills, identify growth opportunities, and elevate team-wide execution capabilities.
- Act as a principal advisor to engineering leadership, contributing to multi-quarter technical roadmaps and enterprise security investments.
- Lead technical engagements and roadmap alignment with enterprise security vendors.
- Serve as the ultimate technical escalation authority for tier-3 troubleshooting.
Requirements:
- 8+ years of progressive cybersecurity engineering experience, with significant time spent operating in a Principal, Staff, or Lead architectural capacity in enterprise environments.
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related discipline, or equivalent practical experience.
- At least one industry-recognized advanced certification such as CISSP, GIAC Advanced Certification (e.g., GSEC, GDSA, or GCIA), OSCP, or vendor-equivalent architectural credentials.
Nice to Have:
- Endpoint Domain Expertise: Deep subject-matter expertise in architecting and governing enterprise Endpoint Privilege Management platforms at scale across large corporate fleets.
- AI and Developer Governance: Experience architecting security controls for modern developer environments, including developer tooling, IDE ecosystems, and emerging AI coding assistants and local models.
- Cross-Domain Security Breadth: Familiarity with modern enterprise EDR platforms and SSPM frameworks, including detection principles, posture management, and API-driven automation pipelines.
- Security Engineering and Architecture: Experience designing secure, scalable systems and implementing security measures that protect information and infrastructure from unauthorized access.
- Technical Mentorship: A genuine passion for mentoring, coaching, and elevating early-in-career and mid-level engineers across security domains.
- Communication and Collaboration: Exceptional communication skills with an ability to influence senior technical leadership, explain nuanced security trade-offs clearly, and foster collaborative relationships across cross-functional teams.
Salary: €104,000 EUR - €156,000 EUR per year
Work Environment: Hybrid, with at least 50% of time spent in the office or in the field